Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: HyFXKtdArOmvWDEYq0YBNfVSzPLgDyAWK3Dyj+opG3Q=
Subject key identifier: DF:3C:44:5E:0C:FF:EF:E0:6B:C5:DC:45:70:73:14:89:B2:77:19:5A
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019EB7333A4F7D45AD56FEA9649F4D8E20FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 15:00:48 +0000
Manifest this update: Thu 11 Jun 2026 15:00:48 +0000
Manifest next update: Fri 12 Jun 2026 15:00:48 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: 2Bq+gwlNeWERj/AD4q+Np5FPqpPHN7lM8a9d32cH6h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:3a:4f:7d:45:ad:56:fe:a9:64:9f:4d:8e:20:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jun 11 15:00:48 2026 GMT
Not After : Jun 12 15:00:48 2026 GMT
Subject: CN=df3c445e0cffefe06bc5dc4570731489b277195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:f4:cd:53:a8:b2:74:62:eb:3e:ed:48:82:
c5:9f:53:04:0f:a3:0d:90:bf:b9:f0:2f:9a:89:05:
ca:af:2d:cc:aa:0a:8d:c4:9b:13:77:ec:aa:bd:d7:
bf:68:d2:77:a4:e2:7d:df:0e:e1:02:03:9e:bc:51:
30:51:f9:70:fd:a9:82:9f:54:3e:e5:ba:d6:e8:1d:
e2:16:a1:5c:4f:d9:4f:e3:ef:ef:fd:7a:75:62:e8:
4d:99:1e:d3:56:2f:2f:f0:fc:5b:7b:e8:3a:8e:8d:
58:ac:ba:37:60:f1:d0:22:10:fc:71:2e:fd:69:75:
33:49:96:71:7a:0d:4d:a8:d5:74:1c:8c:f2:f4:ed:
c2:ba:97:37:f4:53:24:0e:19:71:fa:c5:08:6e:90:
35:09:c9:7b:c4:b4:de:f0:1d:a3:d1:b7:e0:a8:b5:
c5:b4:01:36:72:fd:f7:3a:f8:9a:38:0a:6e:67:f9:
50:03:55:a0:8f:bb:c6:f6:d6:d1:81:f8:6f:c3:4e:
0c:62:c5:27:24:5d:68:a4:f1:fd:e5:e4:f7:f6:c3:
3f:71:de:fe:14:44:c4:5e:8d:0e:6d:22:9c:0c:0d:
98:f7:1f:1e:23:8c:22:ff:40:4e:f2:5c:88:fa:36:
e0:d8:d7:2c:7e:dc:64:a2:4b:62:12:4c:59:04:8e:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:44:5E:0C:FF:EF:E0:6B:C5:DC:45:70:73:14:89:B2:77:19:5A
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:c4:33:54:64:9e:ce:34:cc:1b:dd:75:ea:ad:d2:8e:d5:
40:bb:a8:2c:b0:0f:57:55:f9:2d:ea:45:44:12:8c:e3:70:06:
6f:b1:e0:47:f3:6e:cf:98:74:61:e4:a2:99:a7:b5:59:d8:13:
80:e7:c8:ac:07:c3:9f:58:e1:14:1c:43:d3:b9:1f:fd:b8:7a:
47:ca:42:c5:2b:1d:c7:1b:f3:bd:9b:17:dd:40:8d:f7:33:c6:
5a:45:85:7d:67:54:1d:c3:7a:5c:2d:19:d7:80:e4:a3:a8:da:
e0:bf:73:b8:34:9f:ff:7f:f6:02:20:6c:11:31:9c:6b:9c:da:
39:1d:86:ed:7e:cc:0e:7b:39:d7:92:63:68:60:3e:b7:38:6f:
08:cf:5e:2a:47:a3:c3:11:12:30:2e:12:2f:8a:84:8b:50:25:
ee:00:e6:10:1c:21:72:a7:48:58:35:e8:7b:71:93:2a:c1:b2:
4f:54:9a:70:3a:da:de:87:f6:a1:df:14:78:60:ca:75:4a:5c:
d9:e6:c7:c4:ac:70:b9:ca:a7:ed:49:5b:b9:bd:a5:ec:60:d4:
6d:7c:a7:cd:ab:71:40:a7:fb:b3:d3:c3:9f:f9:65:4d:74:6b:
ca:69:49:2b:1f:00:2b:d6:a4:4b:50:f6:a7:39:a4:d8:e2:be:
0a:fd:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:02 2026 by rpki-client